XSS Fix on search